Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb6338e8-3b98-45c0-936a-f7532d14c16b/194b2ca9-b24d-3e64-80a7-47b57b54dc5c.roa
File:                     194b2ca9-b24d-3e64-80a7-47b57b54dc5c.roa (raw, json)
Hash identifier:          vSUNDmMHxYPAVCFJ4IS4GKVZ6yEEIaKicj1DDaD358U=
Subject key identifier:   E9:B9:C4:D9:B5:62:C5:6F:24:57:39:A8:FA:CF:63:CA:AA:35:AD:93
Certificate issuer:       /CN=bb6338e8-3b98-45c0-936a-f7532d14c16b
Certificate serial:       010D0C9F4328584B80B752559845E23BFD013E40
Authority key identifier: 34:F6:D7:F6:1D:96:AC:9E:90:42:E7:55:B9:11:10:5E:09:CD:4C:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb6338e8-3b98-45c0-936a-f7532d14c16b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb6338e8-3b98-45c0-936a-f7532d14c16b/194b2ca9-b24d-3e64-80a7-47b57b54dc5c.roa
Signing time:             Mon 13 Oct 2025 01:00:29 +0000
ROA not before:           Mon 13 Oct 2025 01:00:29 +0000
ROA not after:            Sun 11 Jan 2026 02:00:29 +0000
asID:                     19804
IP address blocks:        74.220.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb6338e8-3b98-45c0-936a-f7532d14c16b/bb6338e8-3b98-45c0-936a-f7532d14c16b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb6338e8-3b98-45c0-936a-f7532d14c16b/bb6338e8-3b98-45c0-936a-f7532d14c16b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb6338e8-3b98-45c0-936a-f7532d14c16b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:80:b7:52:55:98:45:e2:3b:fd:01:3e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb6338e8-3b98-45c0-936a-f7532d14c16b
        Validity
            Not Before: Oct 13 01:00:29 2025 GMT
            Not After : Jan 11 02:00:29 2026 GMT
        Subject: CN=6384f269-6bff-4b22-8e01-7c7ef5176dd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:30:65:37:16:f7:ea:07:3f:30:09:27:f4:7e:
                    62:97:e2:d9:79:d8:1b:6f:63:67:13:b6:a3:2b:d3:
                    2c:a2:19:ef:2b:c6:47:a3:ca:da:54:d7:3c:95:6c:
                    11:5c:f2:da:1a:60:f2:e1:b7:28:9e:60:9a:40:56:
                    73:60:4f:94:ad:53:71:5a:19:82:89:3c:f1:b2:04:
                    3b:ce:51:03:83:86:97:a2:22:08:93:2b:b6:66:ac:
                    8c:b8:cd:38:0f:69:da:8d:eb:77:a9:9d:aa:c0:eb:
                    f6:d8:3d:63:70:d0:9c:8a:d2:d2:46:80:42:38:02:
                    24:c4:bb:5f:38:58:5c:d3:8e:1e:0f:b5:1f:72:f8:
                    80:38:1c:cf:96:13:a9:a0:49:1c:2b:c4:50:06:0e:
                    83:a7:2a:34:66:4e:22:d1:69:68:fe:c9:d7:ee:8a:
                    f4:e6:e9:f9:ad:97:e8:1a:e6:bf:fe:67:86:b8:ee:
                    b5:e0:2c:18:0d:49:e6:7d:14:e4:13:cf:06:b7:e9:
                    d8:ec:9b:96:a3:10:ab:62:f3:cd:a4:da:9a:ed:de:
                    14:97:82:bc:74:81:9a:ec:52:e3:44:49:1c:bf:54:
                    d5:a9:c0:bd:05:6e:ba:e8:4a:c6:d7:e8:b1:5f:cd:
                    89:be:d9:71:cd:67:2d:b1:39:0c:2d:56:42:ed:03:
                    03:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:B9:C4:D9:B5:62:C5:6F:24:57:39:A8:FA:CF:63:CA:AA:35:AD:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb6338e8-3b98-45c0-936a-f7532d14c16b/194b2ca9-b24d-3e64-80a7-47b57b54dc5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb6338e8-3b98-45c0-936a-f7532d14c16b/bb6338e8-3b98-45c0-936a-f7532d14c16b.crl

            X509v3 Authority Key Identifier:
                keyid:34:F6:D7:F6:1D:96:AC:9E:90:42:E7:55:B9:11:10:5E:09:CD:4C:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb6338e8-3b98-45c0-936a-f7532d14c16b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.220.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:e1:f5:4d:77:b9:07:96:20:ae:87:59:36:69:a2:c3:72:8d:
         eb:68:7f:d7:5a:a0:e8:cf:94:cd:a9:eb:33:32:62:22:4f:fb:
         ef:e4:2f:b5:d1:23:85:c8:5c:b4:ab:49:94:e3:8c:3e:4b:5f:
         5b:13:14:2b:a9:1a:ba:ae:a4:df:30:08:68:49:33:09:a4:eb:
         58:53:99:0d:5b:e5:f5:cc:dc:9f:04:6f:52:f2:95:2b:c0:da:
         b9:de:76:36:bd:cb:2b:35:b2:a4:e4:71:c2:21:c8:78:ab:41:
         10:46:0f:ab:3c:d6:d4:ad:7b:96:30:d7:34:4c:a1:42:4e:a2:
         ac:42:c6:a5:51:a4:e4:d7:bb:0d:e0:ce:d1:c3:c0:6b:b0:87:
         a0:d0:6f:4f:ca:35:48:bc:22:ce:e5:b6:37:b1:88:d5:81:5e:
         5e:ec:42:d4:4a:6c:73:ca:48:96:1d:fe:3c:22:dd:f4:b9:a0:
         ea:73:1f:30:af:63:83:14:22:43:08:d5:9b:41:87:d4:94:08:
         88:70:8c:72:6b:5b:aa:f0:c6:17:14:e2:e7:31:ee:b6:12:79:
         44:0a:d4:96:7c:77:fa:a7:1d:f4:d8:30:72:86:d3:15:93:3e:
         bd:3f:3d:87:82:5c:02:80:1e:e4:d8:c3:8e:b7:4b:7a:49:78:
         89:9c:37:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:05:49 2025 by rpki-client